6eac9626935482ad6e5da51ab153a5a00d8aaa9893ae7bd505ab59e545c95d92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6eac9626935482ad6e5da51ab153a5a00d8aaa9893ae7bd505ab59e545c95d92
Size

1.3MB
MD5

1d20db835bd951b23ddca2c23d64c680
SHA1

6c242fdc3e199e357ea4a07a73243f45b62be35d
SHA256

6eac9626935482ad6e5da51ab153a5a00d8aaa9893ae7bd505ab59e545c95d92
SHA512

acd64dcc3631c6c77cd0905cab67e058991c249f5dfe03ece6b7c4ac44f6dbc20684e22a30b692960b36dc2f3591575c69b09977e3130d4c19009a5f3614f99d
SSDEEP

24576:UGJNNBcL0PD5bLBrq4grC5gRsjdCBhQVIUFz1/gB9Ofi85h0StUrqN6sBno9TJbi:Uctgy3NKSj8OmGgBAa0ttULsK9dSP

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

6eac9626935482ad6e5da51ab153a5a00d8aaa9893ae7bd505ab59e545c95d92
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE